This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json) Hash identifier: w8gZ3ShU1kS0TJBn8Caj8uG03vhFpqqgDQQhiwa0bKM= Subject key identifier: 14:FE:BF:95:03:9A:6A:47:30:78:15:02:F5:67:0A:E6:18:54:0C:2F Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Certificate serial: 019B341FBD7EDC81A89D8B91EEF52B70258F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 01:00:53 +0000 Manifest this update: Fri 19 Dec 2025 01:00:53 +0000 Manifest next update: Sat 20 Dec 2025 01:00:53 +0000 Files and hashes: 1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=) 2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: GVkz/Jt3Uw0f6ZNJDu5DjxxWrSeP9PYqFYC2a33BshU=) 3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:bd:7e:dc:81:a8:9d:8b:91:ee:f5:2b:70:25:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Validity Not Before: Dec 19 01:00:53 2025 GMT Not After : Dec 20 01:00:53 2025 GMT Subject: CN=14febf95039a6a4730781502f5670ae618540c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:fe:f1:dc:9c:78:90:22:b2:0a:80:79:89: d6:91:cf:5c:7e:90:51:85:8a:4a:2a:24:a9:0b:cb: 76:d1:37:51:a1:71:2f:d8:9e:22:89:ac:16:f4:9d: c5:60:36:d7:e8:d7:cd:93:53:ed:87:17:47:9f:cd: f1:a2:a3:b0:bb:38:11:72:9e:3f:a9:ef:09:78:99: 3d:32:67:1b:fe:ab:a2:a2:a8:1c:4e:fd:45:67:d0: 07:eb:4b:ef:00:67:01:d5:06:50:58:82:27:20:7a: 39:cc:dc:f5:56:29:85:e5:0c:da:c8:04:bf:d7:b3: 11:f9:a3:53:ef:6f:24:80:ef:68:74:5e:27:b8:04: d9:a7:99:a4:66:c4:dd:72:5a:94:af:14:ff:e3:6f: b3:57:78:2b:65:c6:c0:9d:80:e2:b5:5c:c9:2d:4e: b3:ff:d3:57:a7:02:91:81:6c:25:75:60:3e:55:53: c8:44:bf:5c:95:e2:29:f1:be:3c:fc:8b:d0:f7:d1: 60:c4:25:0a:03:f4:a9:39:b2:59:14:92:a1:b9:4a: b5:8d:df:b6:28:71:a7:25:bc:54:f8:98:e7:3f:5c: ae:ef:b8:ee:1f:01:ef:fe:2e:1d:d4:63:2a:66:a1: 7e:47:73:dd:15:2e:a1:58:da:4e:0a:c9:36:39:f9: 76:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FE:BF:95:03:9A:6A:47:30:78:15:02:F5:67:0A:E6:18:54:0C:2F X509v3 Authority Key Identifier: keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6d:2c:fa:a6:1e:8f:e6:99:09:fe:71:2a:d6:b7:3a:2e:c7: 5b:22:ac:41:07:2f:18:7b:a6:08:7c:f8:8c:1a:d3:ff:4c:89: 95:e4:a4:da:46:e1:3a:6a:29:45:7c:c9:26:f7:f4:65:77:f5: 84:f3:7e:6c:90:47:dc:ea:c3:6a:47:6e:f6:a5:5a:60:8e:3e: ac:05:f7:28:d4:4a:26:25:c1:52:9a:03:5e:5d:28:25:1e:de: 40:bf:4a:77:6f:ae:56:a4:62:b4:e1:2a:f0:8a:c8:49:65:03: 59:8e:d8:cc:23:ae:44:03:ae:9b:e8:ad:81:7f:dd:9b:4a:d0: 3a:3b:d4:30:c7:ba:00:9b:37:d7:92:26:88:d2:51:3a:7c:88: ae:6e:7d:57:df:fe:c0:90:dc:d0:93:76:81:f5:02:02:e9:98: 33:f8:23:a0:23:dd:84:5a:e5:e0:ed:ba:d9:f5:38:a5:82:db: 59:6b:2e:79:d8:4a:26:fa:86:eb:05:38:70:1e:96:6c:21:84: d3:50:12:59:7d:8d:cb:55:22:4e:dc:e6:8c:5c:f5:f4:6d:ef: 07:91:f8:0a:18:45:85:32:a0:10:6f:01:bb:ce:e4:c6:be:50: 82:60:22:03:8b:ee:12:af:e2:59:e2:64:bc:47:7b:1b:b1:82: cd:88:4e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H71+3IGonYuR7vUrcCWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj ZGNlOTIwHhcNMjUxMjE5MDEwMDUzWhcNMjUxMjIwMDEwMDUzWjAzMTEwLwYDVQQD EygxNGZlYmY5NTAzOWE2YTQ3MzA3ODE1MDJmNTY3MGFlNjE4NTQwYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFn+8dyceJAisgqAeYnWkc9cfpBR hYpKKiSpC8t20TdRoXEv2J4iiawW9J3FYDbX6NfNk1PthxdHn83xoqOwuzgRcp4/ qe8JeJk9Mmcb/quioqgcTv1FZ9AH60vvAGcB1QZQWIInIHo5zNz1VimF5QzayAS/ 17MR+aNT728kgO9odF4nuATZp5mkZsTdclqUrxT/42+zV3grZcbAnYDitVzJLU6z /9NXpwKRgWwldWA+VVPIRL9cleIp8b48/IvQ99FgxCUKA/SpObJZFJKhuUq1jd+2 KHGnJbxU+JjnP1yu77juHwHv/i4d1GMqZqF+R3PdFS6hWNpOCsk2Ofl2gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT+v5UDmmpHMHgVAvVnCuYYVAwvMB8GA1UdIwQY MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm0s+qYe j+aZCf5xKta3Oi7HWyKsQQcvGHumCHz4jBrT/0yJleSk2kbhOmopRXzJJvf0ZXf1 hPN+bJBH3OrDakdu9qVaYI4+rAX3KNRKJiXBUpoDXl0oJR7eQL9Kd2+uVqRitOEq 8IrISWUDWY7YzCOuRAOum+itgX/dm0rQOjvUMMe6AJs315ImiNJROnyIrm59V9/+ wJDc0JN2gfUCAumYM/gjoCPdhFrl4O262fU4pYLbWWsuedhKJvqG6wU4cB6WbCGE 01ASWX2Ny1UiTtzmjFz19G3vB5H4ChhFhTKgEG8Bu87kxr5QgmAiA4vuEq/iWeJk vEd7G7GCzYhO+A== -----END CERTIFICATE-----Generated at Fri Dec 19 09:22:17 2025 by rpki-client